The article presents solutions to anomaly detection in network traffic for critical smart metering infrastructure, realized with the use of radio sensory network. The structure of the examined smart meter network and the key security aspects which have influence on the correct performance of an advanced metering infrastructure (possibility of passive and active cyberattacks) are described. An effective and quick anomaly detection method is proposed. At its initial stage, Cook’s distance was used for detection and elimination of outlier observations. So prepared data was used to estimate standard statistical models based on exponential smoothing, that is, Brown’s, Holt’s, and Winters’ models. To estimate possible fluctuations in forecasts of the implemented models, properly parameterized Bollinger Bands was used. Next, statistical relations between the estimated traffic model and its real variability were examined to detect abnormal behavior, which could indicate a cyberattack attempt. An update procedure of standard models in case there were significant real network traffic fluctuations was also proposed. The choice of optimal parameter values of statistical models was realized as forecast error minimization. The results confirmed efficiency of the presented method and accuracy of choice of the proper statistical model for the analyzed time series.

One of the basic elements of a Smart City is the urban infrastructure management system, in particular, systems of intelligent street lighting control. However, for their reliable operation, they require special care for the safety of their critical communication infrastructure. This article presents solutions for the detection of different kinds of abuses in network traffic of Smart Lighting infrastructure, realized by Power Line Communication technology. Both the structure of the examined Smart Lighting network and its elements are described. The article discusses the key security problems which have a direct impact on the correct performance of the Smart Lighting critical infrastructure. In order to detect an anomaly/attack, we proposed the usage of a statistical model to obtain forecasting intervals. Then, we calculated the value of the differences between the forecast in the estimated traffic model and its real variability so as to detect abnormal behavior (which may be symptomatic of an abuse attempt). Due to the possibility of appearance of significant fluctuations in the real network traffic, we proposed a procedure of statistical models update which is based on the criterion of interquartile spacing. The results obtained during the experiments confirmed the effectiveness of the presented misuse detection method.

Changing the construction of mart Meter (SM) devices, more specifically equipping them with more than one communication module, facilitates the elimination of a Transformer Station Data Concentrator (TSC) module, moving its function to one of the SMs. The opportunity to equip a chosen device in an additional communication module makes it possible to use it as an acquisition node. The introduction of this solution creates a problem with the optimum selection of the above-mentioned node out of all the nodes of the analyzed network. This paper suggests the criterion of its location and, as per the criterion, the way of conduct using the elements of the graph theory. The discussion is illustrated with the examples of the possibility to use the method for the optimization of the architecture of the network. The described method makes it possible to choose the location of a backup acquisition node as well as locate intermediary nodes (signal repeaters) in case of a failure (removal) of some SM devices. In the era of the common introduction of dispersed telemetric systems requiring an adequate level of performance and reliability of information transmission, the offered method can be used for the optimization of the structures of Smart Grids.

The pass/fail form is one of the presentation methods of quality assessment results. The authors, as part of a research team, participated in the process of creating the PRIME interface analyzer. The PRIME interface is a standardized interface—considered as communication technology for smart metering wired networks, which are specific kinds of sensor networks. The frame error ratio (FER) assessment and its presentation in the pass/fail form was one of the problems that needed to be solves in the PRIME analyzer project. In this paper, the authors present their method of a unified FER assessment, which was implemented in the PRIME analyzer, as one of its many functionalities. The need for FER unification is the result of using different modulation types and an optional forward error correction mechanism in the PRIME interface. Having one unified FER and a threshold value makes it possible to present measurement results in the pass/fail form. For FER unification, the characteristics of FER vs. signal-to-noise ratio, for all modulations implemented in PRIME, were used in the proposed algorithm (and some are presented in this paper). In communication systems, the FER value is used to forecast the quality of a link or service, but using PLC technology, forecasting is highly uncertain due to the main noise. The presentation of the measurement results in the pass/fail form is important because it allows unskilled staff to make many laborious measurements in last mile smart metering networks.

This paper proposes three methods of the optimal smart meter selection for acting as a data concentrator in the automatic meter reading last mile network. The study explains the reasons why the selected smart meter should also act as a data concentrator, in addition to its basic role. To select the smart meter, either the reliability of communication or the speed of the automatic meter reading process was considered. Graph theory is employed to analyse the last mile network, described as sets of nodes and unreliable links. The frame error ratio was used to assess the unreliability whilst the number of hops was used to describe the speed of the reading process. The input data for the analysis are qualitative parameters determined based on observations in the real, operated last mile networks as well as their typical topological arrangements. The results of the research can be useful in the last mile network migration process, which uses concentrators to the networks without them, or during the process of newer last mile network implementation, where data concentrators are no longer applicable. The efficiency of the proposed methods is assessed measurably.